Recruitment｜New Graduate

While penetration testing primarily verifies whether an attack such as intrusion or data theft can succeed, and identifies the information assets, vulnerabilities, and intrusion paths involved, Red Team testing goes further: it carries out a variety of attacks based on scenarios tied to the objectives of the engagement.
This not only tests whether an attack can succeed, but also provides insight into the organization's detection, investigation, and incident‑response capabilities from the perspective of people, process, and technology.

We conduct multi‑faceted security assessments targeting the physical and network layers of a wide range of devices, including circuit boards, debug interfaces, and wired/wireless communications.
Through disassembling devices, observing signals, analyzing communications, performing reverse engineering, and developing custom attack tools and test fixtures, we uncover vulnerabilities and design flaws that could lead to information leakage, tampering, or unauthorized manipulation.

We analyze everything from applications to firmware in order to discover and demonstrate vulnerabilities that exist at the implementation level of a system.
By reverse engineering the target binaries to understand their internal structure and behavior, and by developing exploits for the vulnerabilities we uncover, we technically clarify the conditions required for an attack to succeed and the scope of its impact.

For web applications and websites, we gain a deep understanding of the system's specifications and business logic, then perform multi‑faceted security assessments from an attacker's perspective.
Beyond simply checking for vulnerabilities using the latest attack techniques, we analyze how discovered vulnerabilities could be combined into a viable attack scenario, revealing the true business impact and identifying which issues should be prioritized for remediation.

Building on reverse‑engineering techniques, we solve challenges related to topics such as APTs, threat intelligence, malware analysis, attribution, and active cyber defense.
Our work ranges from threat research on specific topics, to client advisory services, to product development.